From our friends at FEDTECH Magazine comes a 5-step process for deploying Two-Factor Authentication (2FA). It’s a summary of key issues that affect deployment of 2FA across federal enterprises – and SurePassID can mitigate every single one!
- Select a Factor That Fits the Organization
- Consider Tokens as the Starting Point
- Conduct a Phased Migration
- Staff Up the Help Desk
- Don’t Sweat the Settings
1. Select a Factor That Fits the Organization
Why select a single OTP token type for your organization? One size never fits all, and a backup authentication method – SMS OTP, for example – can drastically reduce Help Desk support requests if hardware tokens are lost or misplaced. SurePassID enables a mix-and-match strategy across the spectrum of OTP apps and devices:
- Free – Mobile OTP apps for smart phones, tablets, and laptops (and Browser OTP for Windows desktops)
- Very low cost – SMS OTP and IVR
- Higher cost – OTP Display Cards, OTP Keyfob and Mini-Keyfobs, and other hardware tokens
2. Consider Tokens as the Starting Point
Hardware tokens are expensive to distribute and replace, so a mix-and-match token strategy with SurePassID can be a critical to reducing overall deployment and maintenance costs. Put another way, why give an enterprise user a higher cost hardware token if a free Mobile OTP app will meet their use case requirements?
SurePassID supports any OATH-compliant token and proprietary RSA tokens as well. No matter what your hardware token strategy, that investment can be leveraged and extended with SurePassID.
3. Conduct a Phased Migration
The big-bang cutover. It’s a scenario that makes any IT organization – and Help Desk – nervous. But legacy identity and access management solutions are to blame, not 2FA and its tokens. Legacy on-premises authentication servers lack the feature set needed for rapid deployments in today’s hybrid cloud.
As a next-generation identity and access management solution designed specifically for the hybrid cloud, SurePassID makes it easy for organizations to deploy 2FA – to say nothing of Single Sign-On (SSO)! – across any applications, any devices, and any users. There’s no need to prolong deployments, slowly disseminate technology, and migrate legacy applications. Save time and money with SurePassID.
4. Staff Up the Help Desk
With legacy on-premises authentication servers? Absolutely. With SurePassID’s on-demand authentication service? No need.
SurePassID’s One-Click automation allows deployment of an enterprise-class authentication service in minutes – yes, minutes. And SurePassID can be used as an on-demand service, deployed on-premises, or installed anywhere in the hybrid cloud as a VM.
For users, 2FA is rarely a productivity sink compared to multiple applications, multiple user accounts and passwords, and multiple URLs or network paths to bookmark and remember. SurePassID enables hassle-free rollouts of Single Sign-On (SSO) which are made secure by 2FA. Don’t just give users 2FA, give them Secure SSO at the same time and reap enormous productivity gains.
5. Don’t Sweat the Settings
With SurePassID, IT organizations never will. The seamless integration with existing IT infrastructures, ease of administration, automated provisioning and deprovisioning, centralized auditing and reporting, ability to function as an authentication gateway to legacy on-premises authentication servers, and other features make SurePassID a compelling solution.
But don’t take our word for it – try SurePassID’s Secure SSO free for 30 days and see for yourself what the future of identity and access management looks like.